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DETAILED ACTION 



1. 



Claims 1-19 are pending. 



2. 



Response filed 09/05/2008 has been received and considered. 



Claim Rejections - 35 USC § 103 



3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wasilewski et al. (US 5870474) in view of Chen et al. (US 6324646). 

As per claim 1 , Wasilewski et al. discloses a method of providing varying levels 
of security in a data processing system, the method comprising: receiving information 
from an outside source; retrieving a first indicator from the received information that 
instructs the system to operate at a first level of security (i.e. a first 
encryption/decryption key) (see column 1 1 lines 10-23 where the MSK contains the 
decryption key for the encrypted content); continuing operation of said processing 
system at this level (see column 1 1 lines 10-23 and column 2 lines 53-67 where the 
processing continues until the user requests a different program); receiving further 
information from said outside source; retrieving a separate second indicator from said 
further information, the second indicator for instructing the system to operate at a 
different security level than the first indicator (see column 1 1 lines 10-23 and column 2 
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lines 53-67 where, when a user selects a different program, a different EMM is sent 
containing a different decryption key for the different program); receiving an encrypted 
message that authorizes the system to operate at the different level of security; 
authenticating the encrypted message (see column 1 1 lines 34-50); and preventing the 
operation at the different level of security until indicated by the second indicator and the 
encrypted message (see column 1 1 lines 10-50 where the program cannot be 
decrypted until the EMM is received and verified). 

Wasilewski et al. fails to explicitly disclose that the second indicator received 
from the outside source instructs the system to move from a higher level to a lower 
level. 

However, Chen et al. teaches including information from a source to vary the 
security level (see column 6 lines 6-43 and figures 4, 5, and 6 with their corresponding 
descriptions). 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to change the level of security in Wasilewski et al. from a higher level to a 
lower level based on the indicator from an outside source. 

Motivation to do so would have been to provide more flexibility in the security 
system (see Chen et al. column 6 lines 26-43). 

As per claims 2-5, the modified Wasilewski et al. and Chen et al. system 
discloses a decreased security authorization code authorizing a decrease in the 
encryption/decryption levels and a decrease in the authentication level (see Wasilewski 
et al. column 11 lines 10-50 and Chen et al. column 6 lines 6-43). 
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As per claim 6, the modified Wasilewski et al. and Chen et al. system discloses 
wherein said encrypted message further comprises a key for use in a decryption 
algorithm (see Wasilewski et al column 11 lines 10-50). 

As per claims 7 and 19, the modified Wasilewski et al. and Chen et al. system 
stores a master key (i.e. unique user key) to decrypt messages includes new decryption 
key values and using said master key stored at said system to decrypt said encrypted 
message (see Wasilewski et al. column 11 lines 10-50). 

As per claim 8-12, the modified Wasilewski et al. and Chen et al. system 
discloses establishing a Security-Level-status-lndicator at said system to indicate a level 
of encryption/decryption and authentication that is being implemented (see Wasilewski 
et al. column 1 1 lines 1 0-50). 

As per claim 13, the modified Wasilewski et al. and Chen et al. system discloses 
utilizing a cable head-end as said outside source including a set-top box (see 
Wasilewski et al. column 3 lines 43-52). 

As per claims 14-17, the modified Wasilewski et al. and Chen et al. system 
discloses using a Key Management Message to convey said Decreased Security 
Authorization Code; wherein delivery of said Key Management Message is 
authenticated; wherein delivery of said Key Management Message is protected against 
a replay attack; wherein delivery of said Key Management Message is authenticated 
and protected against a replay attack (see Wasilewski et al. column 1 1 lines 10-50). 

As per claim 18, the modified Wasilewski et al. and Chen et al. system discloses 
wherein a lower level of security is nonpublic Key mode, wherein a higher level of 
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security is a public Key mode, continuing operation of the system in the public Key 
mode until an encrypted predefined message is received by the system from the outside 
source (see Wasilewski et al. column 11 lines 10-50 and Chen et al. column 6 lines 6- 
43). 

Response to Arguments 

5. Applicant's arguments filed 09/05/2008 have been fully considered but they are 
not persuasive. Applicant argues that Wasilewski and Chen do not include the claimed 
subject matter, particularly the following steps: "retrieving a first indicator from the 
received information that instructs the system to operate at a higher level of security;" 
"retrieving a separate second indicator from said further information.., for instructing the 
system to operate at a lower level of security than the higher level of security instructed 
by the first indicator;" "receiving an encrypted message that authorizes the system to 
operate at the lower level of security;" "authenticating the encrypted message;" and 
"preventing operation at the lower level of security until a decrease in security levels is 
indicated by said indicator and the encrypted message; while continuing operation of 
said processing system at the higher level of security"; and fail to teach the limitations of 
claims 2-5, 8-12, and 14-17. 

With respect to Applicant's argument that Wasilewski and Chen do not include 
the claimed subject matter, particularly the following steps: "retrieving a first indicator 
from the received information that instructs the system to operate at a higher level of 
security;" "retrieving a separate second indicator from said further information.., for 
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instructing the system to operate at a lower level of security than the higher level of 
security instructed by the first indicator;" "receiving an encrypted message that 
authorizes the system to operate at the lower level of security;" "authenticating the 
encrypted message;" and "preventing operation at the lower level of security until a 
decrease in security levels is indicated by said indicator and the encrypted message; 
while continuing operation of said processing system at the higher level of security"; 
receiving information from an outside source; retrieving a first indicator from the 
received information that instructs the system to operate at a first level of security (i.e. a 
first encryption/decryption key) (see column 1 1 lines 10-23 where the MSK contains the 
decryption key for the encrypted content); continuing operation of said processing 
system at this level (see column 1 1 lines 10-23 and column 2 lines 53-67 where the 
processing continues until the user requests a different program); receiving further 
information from said outside source; retrieving a separate second indicator from said 
further information, the second indicator for instructing the system to operate at a 
different security level than the first indicator (see column 1 1 lines 10-23 and column 2 
lines 53-67 where, when a user selects a different program, a different EMM is sent 
containing a different decryption key for the different program); receiving an encrypted 
message that authorizes the system to operate at the different level of security; 
authenticating the encrypted message (see column 1 1 lines 34-50); and preventing the 
operation at the different level of security until indicated by the second indicator and the 
encrypted message (see column 1 1 lines 10-50 where the program cannot be 
decrypted until the EMM is received and verified). Chen teaches including indicators in 
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messages to tell the receiving system which level of security to operate. At the time of 
the invention it would have been obvious to a person of ordinary skill in the art to 
change the level of security in Wasilewski et al. from a higher level to a lower level 
based on the indicator from an outside source. Motivation to do so would have been to 
provide more flexibility in the security system (see Chen et al. column 6 lines 26-43). 
Applicant contends that Wasilewski fails to teach changing any level of security because 
Wasilewski merely changes keys and one must change the encryption algorithm to 
change the security level. However, one of ordinary skill recognizes that keys have 
different strengths and therefore different levels of security. Applicant's specification 
even discusses using different keys for the different security levels (see pages 6 and 7). 
Applicant further states that Chen does not dynamically change the level of security. 
Wasilewski teaches such a dynamic changes in security while Chen was merely relied 
upon for the teaching of including an indicator in a message to state which security level 
the system should operate. When this is combined with Wasilewski the combination 
teaches such dynamic changing of security levels. 

With respect to Applicant's argument that Wasilewski and Chen fail to teach the 
limitations of claims 2-5, 8-12, and 14-17, Applicant argues that because these 
references fail to teach the independent claim they could not teach these dependent 
claims. However, as discussed above Wasilewski and Chen teach the independent 
claims and therefore teach these claims as put forth in the rejection above. For 
example, the encrypted messages of Wasilewski including the indicator of Chen to 
lower the security correspond to the Decreased-Security-Authorization-Code which can 
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lower the encryption and/or authentication. Additionally, the indicator of Chen shows 
what level of security the system is operating at and therefore teaches the Security- 
Level-Status-lndicator. Finally, as stated above, the indicator of Chen is included in the 
messages of Wasilewski that change the security level of the system, in other words, 
the indicator of Chen is included in either the KMM or EMM messages of Wasilewski. 

Conclusion 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Anderson teaches including an indicator of a security level in a 
KMM. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL PYZOCHA whose telephone number is 
(571)272-3875. The examiner can normally be reached on Monday-Thursday, 7:00am - 
4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner, Art Unit 2437 
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Supervisory Patent Examiner, Art Unit 2437 



